ScanMalware.com

Security Scan Report: file-share-document-2026-08-26-0nedrive.cloud

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/13d1b8cb-afba-4f30-be9b-55fa415e3ca0Domain and IP registration (RDAP)/api/v1/rdap/13d1b8cb-afba-4f30-be9b-55fa415e3ca0How often this domain was scanned/api/v1/domain/stats/file-share-document-2026-08-26-0nedrive.cloudScan history for this domain/api/v1/domain/history/file-share-document-2026-08-26-0nedrive.cloud?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is file-share-document-2026-08-26-0nedrive.cloud and was registered 2 months ago.

Submitted URL: https://file-share-document-2026-08-26-0nedrive.cloud

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

OneDrive-branded fake file-share page on a 42-day-old typosquat domain (0nedrive.cloud) flagged as fakeapp malware by two feeds; pushes Microsoft sign-in. Avoid.

Risk Factors (5)
Primary domain flagged as fakeapp malware by two independent threat-intel feeds
Impersonation of Microsoft OneDrive branding on a non-Microsoft, typosquat-style domain
New (42 days) and unranked domain hosting a brand-impersonating 'shared folder' page
Credential-harvesting social engineering ('sign in with your Microsoft account', verification-code prompt)
Deceptive filename-style hostname (file-share-document-2026-08-26) designed to look like a legitimate shared document
Domain age information unavailable

Details

Page Title

Contract - OneDrive

Scan Type

public

Domain Name Analysis

The domain 'file-share-document-2026-08-26-0nedrive.cloud' uses the .cloud top-level domain while skipping any subdomain. The second-level label 'file-share-document-2026-08-26-0nedrive' is 39 characters long holding ten vowels versus 14 consonants, along with 9 digits and 6 hyphens. Word splitting yields nine words: file, share, document, 2026, 08, 26, 0, ne, drive. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

=>: GD

Page Load Overview

0.61s
Total Load Time
146 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:728 chars
Detector Agreement:67%

Website Classification

Primary Category

download file sharing25% confidence
Type: static
Method: ml+structural

All Detected Categories

download file sharing
25%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112948C30C218307E7517EBBEA28465006F1CA06BF5128BD9FB3F93AD57CB4E654AB910

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:SRMm7SxAHpU3OR6eWO1TIPiUgMBdJ+pzFQmMkX/XSAHP9DUMYxLQHmvTQeuxP06:OixAHpU3OoeWO1TIPiUgMBdJ+pzFQmMi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:415151:xEwiRACbqAoxwxBKYjDkHJIgYlEBCGE+YICgDIptoAktgFtAJSYNATo6oQQBASjGAUApwBDqEJixBIwINnWwQgYBlWBo4DAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00007f7f7f7f7f03
Perceptual Hash:800028d367d37fdf
Difference Hash:b0b2e2c0c0c0c0c6
Wavelet Hash:00001e7f7f7f3f02
Color Hash:N/A

Other Hashes

Crop Resistant:b0b2e2c0c0c0c0c6

Scan History

Scan history not available

Unable to load historical scan data